> ## Documentation Index
> Fetch the complete documentation index at: https://support.entegrata.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Instance Administration

> Manage core infrastructure, networking, security, and system settings for your Entegrata instance.

The Instance Administration module allows administrators to manage the core infrastructure settings that power your Entegrata deployment. These settings control how your instance connects to external systems, secures data, and stays up to date.

Changes made in Instance Administration directly modify Azure infrastructure and may take several minutes to apply.

### Instance Infrastructure

Instance Administration manages four critical areas of your Entegrata infrastructure:

<ResponseField name="Network Connections" type="configuration">
  Manage secure connectivity between Entegrata and your environment.

  * Configure Site-to-Site VPN or Virtual Network (VNet) Peering
  * View connection status and health
  * Monitor connectivity for data collection
</ResponseField>

<ResponseField name="Firewall Rules" type="configuration">
  Control outbound network access from your Entegrata instance.

  * Define allowed domains (FQDNs) and IP addresses
  * Rules are grouped into:
    * System (Managed by Entegrata)
    * Collector
    * Custom
  * Restrict access to only required external services and APIs
</ResponseField>

<ResponseField name="Data Encryption (CMK)" type="configuration">
  Manage encryption keys used to protect your data in Azure.

  * Upload and manage Customer-Managed Keys (CMK)
  * Monitor key expiration
  * Rotate keys as needed to meet security and compliance requirements
</ResponseField>

<ResponseField name="System Versions" type="configuration">
  View and manage your Entegrata platform version.

  * See the currently deployed version
  * View available updates
  * Initiate platform upgrades when new releases are available
</ResponseField>

### Infrastructure State

All instance configuration changes trigger infrastructure updates in Azure. Understanding the infrastructure state is crucial:

<ResponseField name="ACTIVE" type="status">
  The infrastructure is stable and ready for new operations. All administrative functions are available when the system is in IDLE state.
</ResponseField>

<ResponseField name="TRANSITIONING" type="status">
  Infrastructure changes are being applied through Pulumi. During transitions, administrative functions are disabled to prevent conflicts. The system automatically polls for completion and notifies you when operations finish.
</ResponseField>

<Warning>
  While the infrastructure is in TRANSITIONING state, you cannot make additional configuration changes. Wait for the current operation to complete before initiating new changes.
</Warning>

### Azure Infrastructure Integration

Entegrata runs on Azure infrastructure provisioned specifically for your firm. Instance Administration settings directly modify Azure resources including:

* Azure Firewall rules
* VPN Gateways and Virtual Network configurations
* Key Vault encryption keys

Changes are applied through infrastructure-as-code (IaC) using Pulumi, ensuring consistent and repeatable deployments.

<Frame />

## What's Next?

<CardGroup cols={2}>
  <Card title="Network Connections" icon="network-wired" href="/administration/instance/network-connections">
    Configure VPN and VNet peering for secure connectivity
  </Card>

  <Card title="Firewall Rules" icon="shield-halved" href="/administration/instance/firewall-rules">
    Manage outbound access rules for your instance
  </Card>

  <Card title="Data Encryption (CMK)" icon="key" href="/administration/instance/data-encryption">
    Upload and manage customer-managed encryption keys
  </Card>

  <Card title="System Versions" icon="code-branch" href="/administration/instance/system-versions">
    View and upgrade your Entegrata platform version
  </Card>
</CardGroup>